#!/bin/bash
# Configure firewall rules
# Local node firewall settings (services based setup)
sudo firewall-cmd --zone=public --add-service=http --add-service=https --add-service=zabbix-agent --permanent
sudo firewall-cmd --zone=public --remove-service=dhcpv6-client --permanent
sudo firewall-cmd --zone=internal --remove-service=dhcpv6-client --remove-service=mdns --remove-service=samba-client --permanent
sudo firewall-cmd --zone=public --add-port=14000/tcp --add-port=8080/tcp --permanent
#sudo firewall-cmd --zone=public --add-interface=ens224 --permanent
# Additional settings for Liepaja ADS-B 
#L1 239.69.2.116:4018 L2 239.69.2.135:4039 L? 239.69.2.125:4029
#sudo firewall-cmd --zone=internal --add-port=4018/udp --permanent
#sudo firewall-cmd --zone=internal --add-interface=ens192 --permanent
sudo firewall-cmd --reload
